Back to MCP Servers

Semgrep

Scan code for security vulnerabilities, bugs, and anti-patterns using Semgrep static analysis rules

securitysemgrepstatic-analysissastcommunity

Installation

npx @semgrep/mcp

Configuration

{
  "mcpServers": {
    "semgrep": {
      "command": "npx",
      "args": ["-y", "@semgrep/mcp"],
      "env": {
        "SEMGREP_APP_TOKEN": "your-semgrep-token"
      }
    }
  }
}

How to use

  1. Run the installation command above (if needed)
  2. Open your Claude Code settings file (~/.claude/settings.json)
  3. Add the configuration to the mcpServers section
  4. Restart Claude Code to apply changes
View source on GitHub